Discussions

Stay up-to-date with the latest news from NetSuite. You’ll be in the know about how to connect with peers and take your business to new heights at our virtual, in-person, on demand events, and much more.
Now is the time to ask your NetSuite-savvy friends and colleagues to join the NetSuite Support Community! Refer now! Click here to watch and learn more!
Update your Profile with your Support type to get your Support Type badge.
Expand your NetSuite knowledge by joining our Ask A Guru Live sessions. RSVP on this event now.
Make Your Voice Heard: What Tech & ERP Topics Should We Explore in our Next Webinar?? We’re all ears! Vote now, and the poll runs until January. Poll for ERP | Poll for Tech.
Uncover the power of data with the Analytics Hub —your ultimate guide to mastering NetSuite Saved Searches and Reports. Simplify the complex and unlock your organization's true potential. Dive into the Analytics Hub now and soar to new heights!
Hello Community! Josh Maxwell, a User Experience Researcher for NetSuite Foundation has fun a question for you. Imagine for a moment that NetSuite had an assistant like Alexa or Siri. What would you ask of your NetSuite assistant? Use this survey link to share your top questions to the assistant.

Here are some examples to get your creative juices flowing.

"Did I pay vendor John Doe last month?"
"Take me to my largest sales order for this month."
"What invoices haven't been paid yet?"

Removing Netsuite stub dependency on Axis 1.4 jar

edited May 13, 2021 12:57AM in SuiteCloud / Customization

We are using Netsuite stub to call SOAP API's. The stub has dependency on Apache Axis 1.4 Jar

Apache Axis 1.4 Jar  contains Vulnerabilities like CVE-2019-0227 : A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.

The severity is high with Base Score: HIGH (7.5)

Please let me know if we can have any alternative way to connect Netsuite or can replace the dependency for Axis 1.4 jar to higher version as part of dependency.

Howdy, Stranger!

Log In

To view full details, sign in.

Register

Don't have an account? Click here to get started!

Leaderboard

Community Whiz

Quarter 4 (Oct-Dec 2024)

This Week's Leaders

This Month's Leaders

All Time Leaders